CVE-2025-61677: A Silent Code Execution Risk Inside DataChain’s AI Data Core Threat Advisories AegironDecember 19, 2025December 19, 202512 mins0 Vulnerability name: DataChain Data Storage – Unsafe Deserialization Leading to Remote Code ExecutionCVE ID: CVE-2025-61677CVSS v3 score:…continue reading..
CVE-2025-12490: Arbitrary File Write via Path Traversal in pfSense Suricata Package Vulnerabilities AegironDecember 19, 2025December 19, 202510 mins0 Vulnerability name: pfSense CE Suricata Package – Arbitrary File Write via Path TraversalCVE ID: CVE-2025-12490CVSS v3 score:…continue reading..
Living Off the Land: How Real Attackers Abuse Native Binaries Cyber Kill Chain CyberDefenderDecember 19, 2025December 19, 20258 mins0 LOLBins (Living-Off-the-Land Binaries) are legitimate, trusted OS utilities (mostly Windows, but also Linux/macOS) abused by attackers to…continue reading..
CVE-2025-55183: React Server Components Leak Internal Server Logic Through Unsafe Serialization Vulnerabilities AegironDecember 19, 2025December 19, 202513 mins0 Vulnerability Summary Executive Overview CVE-2025-55183 is an information disclosure vulnerability affecting React Server Components in early React…continue reading..
CVE-2025-10019: Silent Data Exposure via Broken Authorization in Contact Form Email for WordPress Vulnerabilities AegironDecember 19, 2025December 19, 202510 mins0 Vulnerability Summary Overview Contact Form Email is a commonly deployed WordPress plugin used to collect and process…continue reading..
CVE-2025-67845: Static Asset Escape — Path Traversal Exposure in Mintlify Platform Vulnerabilities AegironDecember 19, 2025December 19, 202511 mins0 Vulnerability Summary Overview CVE-2025-67845 is a directory traversal vulnerability affecting the Static Asset Proxy Endpoint of the…continue reading..
Clop Ransomware Is Actively Exploiting Gladinet CentreStack Servers Impact CyberDefenderDecember 19, 2025December 19, 20255 mins0 The Clop ransomware group is once again making headlines—this time for targeting internet-facing Gladinet CentreStack file servers…continue reading..
Kimsuky : A North Korean APT – Nightmare for Android Users Latest Cyber Attack CyberDefenderDecember 19, 2025December 19, 20257 mins0 Kimsuky is a North Korea–linked advanced persistent threat (APT) group known for espionage, credential theft, and targeted…continue reading..
TorrentLoader Campaign — Malicious Payloads Hidden Behind Popular Movie Torrents Malware AegironDecember 18, 2025December 18, 202510 mins0 Executive overview TorrentLoader is a malware delivery campaign that abuses public torrent platforms and file-sharing communities to…continue reading..
Impersonation at Scale: Android Malware Masquerading as Government Services Malware AegironDecember 18, 2025December 18, 202511 mins0 Threat Details This threat involves a set of malicious Android applications that disguise themselves as official government…continue reading..
